259 matches found
geoBlog MOD_1.0 deleteblog.php id Variable Remote Arbitrary Blog Deletion
No description provided by source. source: http://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploit these issues to delete blogs...
Blogs manager <= 1.101 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Blogs manager = 1.101 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
pointter php content management system 1.2 - Multiple Vulnerabilities
No description provided by source. Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that ca...
Apple Safari 2.0.4 Cross-Domain Browser Location Information Disclosure Vulnerability
source: http://www.securityfocus.com/bid/24121/info Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions. Exploiting this issue may allow attackers to access locations that a user visits, even if it's in a...
Disqus Wordpress Plugin Flaw Leaves Millions of Blogs Vulnerable to Hackers
A Remote code execution RCE vulnerability has been discovered in the comment and discussion service, Disqus plugin for the most popular Blogging Platform Wordpress. While there are more than 70 million websites on the Internet currently running WordPress, about 1.3 million of them use the ‘Disqus...
CVE-2013-2945
CVE-2013-2945 is a SQL injection vulnerability in blogs/admin.php of b2evolution before 4.1.7. The flaw enables remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] parameter; note that this can be leveraged with CSRF to allow remote unauthenticated attack...
Phabricator: UnAuthorized Editorial Publishing to Blogs
Hi All, Please see the attached file. Thanks in advance Mark Litchfield...
DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs
None...
Financial Times hacked by Syrian Electronic Army
The Financial Times has become the latest news outlet to be hacked by supporters of the Syrian president Bashar al-Assad, following a phishing attack on the company's email accounts. The posh broadsheet's Tech Blog - at https://blogs.FT.com/beyond-brics was compromised to run stories headlined...
UBUNTU-CVE-2012-6104
blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed...
CVE-2012-6104
blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed...
MyBB Profile Blogs Plugin 1.2 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...
MyBB Profile Blogs 1.2 Cross Site Scripting / SQL Injection
Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...
CVE-2012-5910
SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...
IDIC Blogs Shell Upload Vulnerability
IDIC Blogs suffers from a remote shell upload vulnerability. '/ -.- --------------------oOO------OOo---------------------- | IDIC Blogs Arbitrary File Upload Vulnerability | --------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://0xuht.org ! Download:...
IDIC Blogs Shell Upload
'/ -.- --------------------oOO------OOo---------------------- | IDIC Blogs Arbitrary File Upload Vulnerability | --------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://0xuht.org ! Download: http://sourceforge.net/projects/idicblogs/files/ ! Version: - !...
45000 Wordpress blogs hacked on 2nd day of Spam campaign
Yesterday I have reported about a huge mysterious hack in wordpress servers, that cause compromise of 15000 wordpress account and hacker managed to post same spam article of "Money making sites" with title - "Im getting paid!" on each blog. We explained how hacker was earning in thousands of...
Rock band 'Garbage' twitter account Hacked to spam monetized link
Official Twitter account of Rock band 'Garbage' has been compromised and hacker is posting Spam tweets and links using adf.ly, which is a url shortener service that pays on clicks. Hacked twitter account hack around 55,563 Followers. Hacker can post malicious links also, but in this case we can s...